Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: kKz+zuc8pjTSEuAO8G9WxZNkmMvYyf+5ZJjwG3uWuX8=
Subject key identifier: 87:66:A2:BC:BA:6F:D9:AC:2D:CE:56:57:A1:00:6C:60:E2:D0:99:9B
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 019E20FEED18D988B16FAD37D523E3FE3726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 07D6
Signing time: Wed 13 May 2026 11:00:37 +0000
Manifest this update: Wed 13 May 2026 11:00:37 +0000
Manifest next update: Thu 14 May 2026 11:00:37 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: pY96FUq//Zadk3IP7xNc7vagYxMaRvps7LLxILZRahg=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:ed:18:d9:88:b1:6f:ad:37:d5:23:e3:fe:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: May 13 11:00:37 2026 GMT
Not After : May 14 11:00:37 2026 GMT
Subject: CN=8766a2bcba6fd9ac2dce5657a1006c60e2d0999b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:18:a7:eb:91:7c:af:54:c5:39:8c:20:bd:
c9:2f:0d:fd:65:4d:85:ba:03:6a:ca:be:21:7b:11:
49:6a:ac:3a:5f:02:c2:b3:d0:5e:c3:55:3f:08:ee:
67:35:2d:71:80:30:80:79:12:63:77:85:1a:f4:bb:
31:34:26:c7:6a:5f:3d:af:0b:e0:2b:5d:a3:86:e0:
93:52:fd:b6:e7:7b:9b:a5:3d:9b:ff:9b:90:cc:42:
bf:78:57:88:31:c9:0d:47:2a:00:41:59:7d:04:6f:
ec:76:31:af:b4:72:90:67:ea:f1:6b:c3:f5:9c:42:
91:ec:fa:bb:72:81:f6:1e:57:7d:78:03:92:49:d0:
6d:ed:c7:37:82:be:c7:0a:be:33:1c:dd:4f:73:f7:
55:f8:3d:b4:43:e1:93:7a:cd:20:72:82:7f:70:6c:
eb:26:02:40:d9:a8:f3:ea:60:90:67:72:8d:fa:e5:
e4:dd:3f:e8:d8:ab:8f:de:fb:1f:2a:26:67:34:c9:
50:e6:79:a1:c5:4e:9e:93:fd:40:4f:8b:c5:bc:46:
ba:f5:9d:96:a1:c1:18:37:52:b5:d1:00:b7:56:75:
5d:ff:a8:e9:0a:78:d4:36:ea:4c:8e:55:de:8e:f5:
56:6e:1b:22:01:e0:4f:74:0e:81:48:7f:b9:63:1c:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:A2:BC:BA:6F:D9:AC:2D:CE:56:57:A1:00:6C:60:E2:D0:99:9B
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:5d:5d:14:57:f5:e5:55:4e:f2:ba:6d:ad:32:1b:55:fd:
fb:d5:24:62:40:fd:50:71:6d:7b:29:14:f2:9f:f0:0d:0f:b2:
fa:c3:7c:9a:5a:b0:17:f9:3a:ce:47:8c:4f:9d:24:47:c9:52:
b5:9c:df:9e:fb:6b:18:57:bf:da:5e:7f:1b:9d:d6:43:66:fd:
ff:e1:81:15:58:36:b1:e0:ab:b3:c9:e8:7c:37:6c:3b:98:0e:
ab:7c:01:fb:30:93:76:14:97:dd:a1:e5:c5:f9:a4:7e:03:fc:
0c:b0:41:1c:8a:74:db:d0:fd:1c:8f:fe:53:de:00:47:e6:7a:
6c:26:d9:44:4a:d9:a6:46:e5:2d:c3:a6:0a:56:8a:d8:07:de:
96:ae:f5:78:50:d4:73:e4:72:8e:73:ee:85:6b:9f:af:b7:97:
12:fe:ba:23:f0:9c:31:d0:f6:4f:4c:f4:84:8e:ac:4d:58:70:
ea:8e:e8:d6:96:6b:5c:1b:ce:97:e1:35:c4:c4:59:24:2f:5d:
a7:d2:73:73:4b:c0:94:dc:48:fa:0a:2d:46:23:c6:95:fc:aa:
d3:fc:2a:69:ef:1a:10:a1:bb:01:e7:f8:29:63:a4:27:88:05:
08:39:9d:89:18:10:ee:3b:b4:dc:30:f6:c4:b5:3d:e2:56:cd:
2b:ec:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:28 2026 by rpki-client